Good Security Practices

Always use a PSK or an API when possible.

When scripting services that require a password to be stored, especially on multiple computers, you should always lock down the account so that it is only able to perform the task that you desire. I highly suggest one account per task.

This is discussed on TechNET -- albeit not very thoroughly. Maybe I'll blog the details later and link it here ...